2020

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6150v2 before 1.0.1.76, R7500v

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6100v2 before 1.0.1.76, EX6150

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.10.2

NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information.

NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.

NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.

NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information.

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200v4 b

NETGEAR R8500 devices before v1.0.2.128 are affected by a buffer overflow by an unauthenticated attacker.

Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.34, JNR1010v2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6000 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befor

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.40,

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.40,

Certain NETGEAR devices are affected by SQL injection. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6200

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNDR3000 before 1.0.0

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6400 before 1.0.0.74,

**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier c

**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could allow a denial of servi

**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on the network when the '

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered

A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface,

A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to inte

A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Co

ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administr

Jenkins AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary ty

Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary

Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XX

Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where t

It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not

Users can lock their notes with a password in Memono version 3.8. Thus, users needs to know a password to read notes. Ho

In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any use

In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is a stored XSS vulnerability on the admin tools --> audit pag

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entities_id parameter

In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve

In Rukovoditel 2.5.2 has a form_session_token value to prevent CSRF attacks. This protection mechanism can be bypassed w

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reports_id (POST) par

In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a re

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users

In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the configuration page via the copyright text input. Thus,

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or

In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability w